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One of the basic sanity properties of a behavioural semantics is that it constitutes a congruence with 
respect to standard process operators. This issue has been traditionally addressed by the development 
of rule formats for transition system specifications that define process algebras. In this paper we sug- 
gest a novel, orthogonal approach. Namely, we focus on a number of process operators, and for each 
of them attempt to find the widest possible class of congruences. To this end, we impose restrictions 
on sublanguages of Hennessy-Milner logic, so that a semantics whose modal characterization satis- 
fies a given criterion is guaranteed to be a congruence with respect to the operator in question. We 
investigate action prefix, alternative composition, two restriction operators, and parallel composition. 

1 Introduction 

Congruence is one of the most important properties of a behavioural semantics. The reason is that the 
fundamental issue in process algebra - providing sound and complete axiomatisations for collections of 
process operators - requires that these operators are compositional. Only then we can use equational 
logic priciples and provide sound axioms. 

There is a large amount of research to find ways of ensuring the congruence property. The basic 
methodology is to impose restrictions on operator definitions; there is a notion of a rule format for 
transition system specifications which provide operational semantics for process algebras. If a process 
operator is defined with rules that fit within a format, then the semantics in question is a congruence 
with respect to this operator. Examples include the panth format for bisimulation semantics (H and 
formats designed specifically for several decorated trace semantics fl4j. The focus here is on semantics; 
rule formats are most often defined with one particular process semantics in mind. Interestingly, in 
|E9, the modal characterization of a process semantics is taken as starting point to derive the syntactic 
constraints of the congruence format for this semantics. A modal characterization of a semantics is a 
sublanguage of Hennessy-Milner logic such that two processes are semantically equivalent if and only 
if they satisfy exactly the same formulas in the modal characterization of the semantics. For almost all 
process semantics in van Glabbeek's spectrum O there is a corresponding modal characterization. 

In this paper, we attempt to look at the compositionality issue from an operator's point of view. For 
a number of basic process operators, we determine conditions that a process semantics should satisfy in 
order to be congruence with respect to such an operator. To be more precise, given a process operator, 
we develop syntactic constraints on modal characterizations; if the modal characterization of a process 
semantics satisfies these constraints, then the process operator is guaranteed to be compositional with 
respect to this semantics. So instead of going from a process semantics to a class of transition system 
specifications for which that semantics is a congruence, we go from the transition rules of a process 
operator to a class of process semantics for which this operator is compositional. This approach gives us 
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an orthogonal view on compositionality, and provides further insight into connections between process 
algebra and modal logic. 

2 Preliminaries 

We work in the usual setting of labelled transition systems (LTSs), which consist of a set S of states p 
(also called processes), a set Act of actions a, and a set of transitions p — > p'. 

2.1 Hennessy-Milner logic 

Hennessy-Milner logic (HML) Q is a modal logic for specifying properties of states in an LTS. There 
exist different versions of HML (THUO. The choice of syntax is important here, even if two logics 
have the same expressivity; compositionality requirements established for some version of HML (e.g. 
with diamond, conjunction and negation only) may become insufficient when we add other operators 
(e.g. box), because these extra operators may require syntactic requirements of their own. Our point of 
departure is the infmitary HML variant without box and disjunction. The HML syntax is therefore as 
follows: 

<p ::= T | A iG /<Pi I ( fl )<P I 
where / is an arbitrary index set, and a ranges over the set Act of actions. Furthermore, we use F 
as an abbreviation for -T. We introduce some additional notations, based on the standard notion of 
context. A context, notation C[], is a HML formula with one occurrence of []. A muhicontext C[], e / is a 
HML formula containing one or more [] symbols, indexed by the elements from /. For a (multi)context 
C[(pi]ieh a formula is obtained by replacing the [],• symbols with formulas <p,-. Finally, we introduce an 
n-level context, which means that the context symbol has n diamond operators above it. It is defined 
inductively as follows: 

• [] is a 0-level context; 

• if C n \\ is an «-level context, then ->C n [] and C n \\ A A;6/9i are n-level contexts; 

• if C„\\ is an n-level context, then (a)C n \\ is an (n + l)-level context. 

An example of a 0-level context is (a)(b)T A ->[], while (a)((a)(b)T A []) is a 1-level context. 

A sublanguage G of HML gives rise to a process equivalence by identifying those processes which 
satisfy exactly the same formulas from & : 

def 

p^eq^ Vyetf : (p \= (p q \= q>). 

We call & a modal characterization of Below, examples of modal characterizations of standard 
process equivalences from the literature are given (see ll6l): 

• trace observations: 

e T <p ::=T I (a)(p' (<p' G G T ) 

• completed trace obervations: 

G CT (p ::= T I (a)(p' {(p' € G CT ) \ A aeAct ^(a)T 

• failures observations: 

G F <p ::= T | (a)<p' (<p' € F ) \ Aie/ _, < fl i> T 

• readiness observations: 

6 R <p ::= T I (a)(p' (<p' € ff R ) \ Aie/ ^ ( a i) T A A jej{bj)T 
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• failure trace observations: 

G FT (p ::= T | (a)(p' (<p' £ ff FT ) \ f\ m -.( fli )T A <p' (<p' € ^W) 

• reat/y ?race observations'. 

G RT (p ::=T | (a)p' (<p' € ^r) I Aie/^(^) T A AjeA b j) T ^<P' (<?' ^ G Rt) 

• simulation observations'. 

G xs (p ::= T | (a)<p' (<?>' G ^i S ) | Aie/Pi G ^w) 

• reac(y simulation observations'. 

@ RS (p ::= T j (a)<p' (<p' € ^ RS ) I -><fl)T | A, e /<P; (<Pi € 0*s) 

• n-nested simulation observations for n>2: 

G nS <p ::=T j (a)p' (<p' G ^ nS ) | A, e /<P; (<P; € ^s) I "V (<?>' G 

• bisimulation observations'. 

G B <p ::= T I (a)<p' (9' G | Aie/Pi (<Pi 6 ^b) | "V (<?' € 

We write 9 = 9' if /? |= (p <^ p |= <p' for any process p in any LTS. Given an & C HML, we write 
<^= for the set of HML formulas <p for which there exists a <p' G ^ with (p = <p'. 

2.2 BCCSP 

Any LTS isomorphic with a finite tree can be described with the following process algebra BCCSP, 
consisting of three operators: 

• a miliary process which does not have any behaviour; 

• action prefix a.{) for a G Act: a unary operator which represents execution of a single action 
followed by the process given as the argument, defined by the transition rule 



a 

ax—tx 

• alternative composition (+), a nondeterministic choice between two processes, defined by the 
transition rules 

a , a 1 

x^rx y^-y 

x + y — > x x + y — > y 

In this paper we focus on several process operators from the literature, and try to establish which 
syntactic properties a modal language & C HML should satisfy to guarantee that the induced equivalence 
is a congruence with respect to the given operator. That is, given a process operator /, we will search for 
a syntactic condition C such that if satisfies C, then / is compositional with respect to 

3 Basic operators 

3.1 Alternative composition 

We start with alternative composition, which expresses a nondeterministic choice between two processes. 
We want to find a general property of a modal language that would guarantee congruence of the induced 
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equivalence with respect to alternative composition. Our first observation is that the behaviour of an 
alternative composition p\ + p2 after performing the first step is completely determined by the behaviour 
of one of the components. For example, p\+ pi\= (a)<p if and only if either p\ \= (a)(p or p2 \= (a}(p. 
The only potential problem can occur when there is a formula with a conjunction at level (i.e., not in 
the scope of an action prefix). For instance, consider & = {(a)T A (b)T}. We have aO and bO ~^ 0, 
but aO + bO rfff 0+0. As it turns out, it suffices to simply close the language on sub-conjunctions at level 
0. 

Theorem 1 Let ^ C HML. If for any 0-level context C [] and <p,- G HML for i € /, 

(AC) Co [Afe/ <Pi] € G implies that V i€/ : {% G G=), 
then ~^ is a congruence with respect to alternative composition (+). 

Proof: Assume a modal language 6 with the AC property. Let p\ ~^ q\ and p2 ~& q2- We show that 
for any q> £ G: 

P\+P2\=9 => q\ +<?2 h <p 

(the converse implication "-<=" is symmetric). We apply induction on the structure of (p. The base case 
(T) is trivial. We proceed with the inductive step. Assume that p\ + p2 |= (p. We have to consider the 
following cases: 

• (p = (a)\j/: then either p\ |= {a)\j/ or /?2 |= From the equivalence of components we have 
either q\ \= (a}\j/ or ^2 \= which yields q\ +q2 |= {a)Y- 

• <p = /\ ieI (pf. we have Pl + p 2 \= A ieI (pi V,- e/ : p x + p 2 \= (Pi ^ V /e/ : q x +q 2 \= (Pi (AC + 
inductive hypothesis) 4=> q\ +q2 \= AieiW- 

• (p = let y/ be the outermost subformula of <p which does not begin with a "->" symbol (so 
<p = (-i)' 1 ^')- Then <p is logically equivalent to either or -ii// 7 . The case y' = T is trivial. Also, 
the case where <p = can be handled analogously as the first two cases. We thus have to consider 
two possibilities: 

- (p = ^(a)(p': we have P1+P2 \=-<{a)(p' 44> p\ |= -i (a) (p' A p 2 \=->(a)(p' <^ q\ \=-<(a}(p'A 
q2 \= ~^{a)(p' (equivalence of components) q\+q2\= -<(a)(p'. 

- <P = - 1 Aie/ <P; : we have Pi+P2h^ Aiei <Pi & 3 iei -Pi+Pih ^<Pi & 3 ie/ _1 <Pi 
(AC + inductive hypothesis) 44> <?i + <?2 N Are/ %• 

□ 

For example, consider ^ = {(a) {{a) J A (fc)T) A -<(b)T, (a)((a)J A (6)T),-i(fe)T}. The language ^ 
satisfies the AC requirement, and so the corresponding equivalence ~^ is a congruence with respect to 
+. 

Almost all modal characterizations of standard process semantics from Section 12.11 fulfill AC. The 
only exception is the modal characterization of completed trace equivalence, although we can provide an 
alternative characterization that meets the AC requirement: 

G* T <p ::= <p' (<p' £ @ C t) I -><a>T 

The characterization Gq T is the same as &cr, except that it includes formulas -i(a)T. Clearly this does 
not change the corresponding semantics. 
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3.2 Action prefix 

In the case of action prefix, it is easy to obtain a sufficient congruence requirement; the crucial observa- 
tioin is that a.p \= (a)(p if and only if p \= (p, so we need to make sure that for each formula Co[{a)(p] G 
the subformula <p also belongs to the language G. If this is not the case, an equivalence might not be a 
congruence. For instance, if & = {{a)(a)T}, then a.O ~^ 0, but a.a.O rf>@ a .Q. 

Theorem 2 Let @ C HML and fix a £ Act. If for any 0-level context Cq[] and <p G //ML, 

(AP) C [(a)<p] G ^ implies that <p G <^=, 
then is a congruence with respect to the action prefix operator a.Q. 

Proof: Let p a. We need to show that for any (p G ^, a.p |= <p -£4> a.a |= (p. 

Take any <p G 6. Let <p = C[(c?, )<p,]; e / such that the multicontext C[], e / does not contain any action 
prefix symbols. That is, the (a,)<p, for i G / are all action prefix subformulas of <p that appear at level zero. 
Since C[], e / is built from only T, conjunction and negation, whether a process satisfies (p is completely 
determined by the satisfiability of (fl , i )<p,- for i G / by this process. In other words, if V,- £ / : (p\ \= (a,)<p,- <3> 
Pi H (^i)9^)> then /?i |= (p 44> pi \= (p. Coming back to our setting with a.p and a.q, take an arbitrary 
i G /. We have: 

a.p [= («2,)<p; 

-4=> (a; = a) Ap \= <Pi 

(flj = a) Aa |= <f>i (AP + ~ e q) 
<^a.q \= (at)®. 

The choice of i was arbitrary, hence the earlier remark yields: a.p \= (p <^ a.q \= (p. □ 
The AP condition is satisfied by all modal characterizations from Section I27TI 



4 Restriction operators: projection and encapsulation 

We now consider projection and encapsulation operators. The nth projection of a process p, for n > 0, 
mimicks the behaviour of p up to level n: 



Applying encapsulation with parameter B C Ac? removes all transitions whose labels are in B from the 
process: 

d B {x)^d B {x>) 

More generally, we consider unary restriction operators / such that given a process p, the process f(p) 
can be viewed as a subgraph of p. Below we will give a precise description of which restriction operators 
are covered. For the projection operator 7i n as well as for the encapsulation operator d B , given any HML 
formula we can deduce in advance which of its subformulas (a)q> will always yield false, regardless of 
the process n„(p) or dg{p) for which the HML formula is evaluated. In case of a process K n {p), any 
subformula (a)cp that appears at level n can be replaced by F. And in case of a process d B (p), any 
subformula (b)(p with b G B can be replaced by F. 

We cannot reason in this way about any restriction operator. For example, consider the priority 
operator 6, which assumes a partial order < on the set of actions and allows us to execute an action only 
if no action with higher priority is executable at the same time: 
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x-%x' Vb G Act (a < b => x yV) 
0(jc) A e(jtO 

Suppose that a > b and there is a process p of which we only know that it satisfies (b)T. This knowledge 
is not sufficient to determine whether 6(p) \= (b)T. 

Let / be a unary operator such as 7t n or We would like to define for each formula <p G HML 
a coiTesponding formula cutf{(f>) in which every subformula (a)(p' which is known in advance to be 
unsatisfiable when evaluating any process f(p) is replaced by F. Actually this means that either we can 
replace a larger subformula by T, or the entire formula becomes F. Namely, we can replace the first 
innermost negation symbol (closest to the introduced F) and the following subformula by T; if the F 
symbol does not appear within the scope of a negation symbol, then the whole formula yields F. If a 
language G C HML is closed under cutf, then it induces a congruence with respect to /. The whole idea 
is made formal below. 

Lemma 1 Let / be a unary process operator. Suppose there exists a function cutf : HML — > HML such 
that for any process p and <p £ HML, 

(CUT) f(p)\=q> p\=cut f (q>) 

Then for any language G satisfying 

<p G G => (cut f ((p) G G= V cutf(<p) = F) 

the corresponding equivalence is a congruence with respect to /. 

Proof: Suppose G C HML and p ~^ q. We have f(p) \= (p ^ p\= cutf((p) (CUT) <^> q \= cutf((p) 
(either because cutf((p) G G= and p ~^ q, or because cut/((p) = F) 44> f(q) \= (p (CUT). □ 

The next lemma gives an explicit condition for a modal language to induce a congruence in case cutf 
formulas are obtained from the original ones by turning certain subformulas {a)(f> into F. 

Lemma 2 Assume / and cutf are as in Lem. [T] and satisfy CUT. Suppose that for each cp G HML there 
exists a multicontext C[], e / such that <p = C[(a/)<p;], e / and cutf((p) = C[F], G /. Then for each language 
G C HML that satisfies for any context C'[] and <p G HML, 

(RES) C'h<p] G implies C'[T] G G=, 

the coiTesponding equivalence ~^ is a congruence with respect to /. 

Proof: By Lem. [T] it suffices to prove that for all <p G ^ either cutf((p) G ^ or cutf(cp) = F. Take any 
<p G G such that cutf(cp) ^ F. By assumption, cutf((p) = C[F],- e / for some multicontext C[], e /. Since 
cutf(cp) ^ F, clearly each occurrence of F in this formula must be within the scope of a negation symbol. 
Hence cutf((p) = C'[-iD'[F]]; e /, where we can choose contexts D'[] for / G / such that in each D'[], [] is 
not within the scope of a negation. Then C'[-.D ! '[F]], e/ = C'[J] ieI . Since G satisfies RES, C'[J] ieI G G=. 
Hence cut f ((p) G G=. □ 

We have provided a compositionality framework for a general class of restriction operators. What re- 
mains is to provide cutf functions for the projection and encapsulation operators. 
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Lemma 3 The functions cutf defined below are proper cutting functions (i.e., they satisfy condition 
CUT of Lem.Q}. 

a) For the projection operators % n with n > 0: 

cut n (J) = T cut„(/\ ie[ (pi) = f\ ieI cut„((pi) cut n (^(p) = ^cut n (<p) 
cuto((a)(p) = F cut n+ \{(a)(p) = (a)cut n ((p) 

b) For the encapsulation operators d B with B C Act: 

cut B (J) = T cut B (f\iei<Pi) = /\iei cut B(<Pi) cut B (-^<p) = -^cut B ((p) 

cut B ((a)(p) = F if a G B cut B ((a)q>) = (a)cut B ((p) if a <£B 
Proof: a) We prove CUT by induction on the structure of (p. 

• cp = T: 

Xn{p) h T and P H cut n (T) = T. 

• <p = {a)\j/: 

We distinguish the cases n = and « > 0. Clearly 7to(p) V= ( a )Y an d P Y= cuto({a)\jf) = F. 

If n > 0, then 7T„(p) |= (a) =V : p A // A 7r„_i(//) |= y/" (transition rule for K n ) <^3p' : p A 

p' A p' \= cut n -\(y) (structural induction) 44> p |= (a)cut n -i(y) 4^ p\= cut n ((a)Y) (definition of 

cut n ). 

• <P = /\ieiW 

Kn (p) \= Aiei Yi & Vrei ■ K„ (p) \= Yi & v ie/ : P \= cut n ( Yi) (structural induction) o p \= cut n {/\ iel Yi) 
(definition of cut n ). 

• (p = 

K n (p) \= -^y<3>K n (p) ^\j/<=^pY= cut n (y) (structural induction) <3>p\= -^cut n (y) p \= cut n (^y) 
(definition of cut n ). 

b) Again we use structural induction on (p. 

• <p = T: 

da (p) \= T and P \= cut B {J) = T. 

• (p = {a)\j/: 

Suppose first that a € B. Then d B (p) ^ (a)Y (transition rule for d B ) and p ^ cut B ((a}\j/) = F 
(definition of cwfg). 

Suppose now that a £ B. Then d B (p) \= (a)\j/ 44> Bp' : p A p' A d B (p') \= y (transition rule for 
d B ) 44> 3p' : p A p' Ap' \= cut B (\ff) (structural induction) <^> p \= (a)cut B (\ff) p\= cut B ((a)\ff) 
(definition of cut B ). 

• <P = AielY- 

d B {p) H Aief Y^Viei ■ d B (p) \= Yi^iei ■ P H c ut B {wd (structural induction) |= cut B {f\ iel Yi) 
(definition of cut B ). 

• (p = 

h ~^Y d B (p) y= Y ^ P V= cut B (Y) (structural induction) <^> p \= ^cut B {y) <^ p \= 
cut B (-i\j/) (definition of cut B ). 
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□ 

Theorem 3 For any language G C HML satisfying RES, the corresponding equivalence ~^ is a con- 
gruence with respect to the projection operators % n (for n > 0) and the encapsulation operators ds (for 
B C Ac?)- 

Proof: By Lem. [3j the functions cw?„ and cuts satisfy CUT. Observe that the cut n and cuts functions 
defined in the Lem. [3] only replace certain subformulas {ci)\j/ of the original formula with F. So they 
meet the requirements of Lem. [2] Congruence is thus an immediate consequence of Lem. |2] □ 

To demonstrate that the RES requirement is essential, consider the following counterexamples. 

• For projection, take G = {-<(a)-i(a)T}. We have aaO ~^ 0, but 7t\{aM) rf@ 7Ti(0). 

• For encapsulation, take G = {(a)— i{Zj)T}. We have abO 0, but d^(ab0) d^(0). 

The RES requirement is satisfied by every characterization from Section 12.11 except for completed 
trace observations. Completed trace equivalence is a congruence with respect to projection operators, but 
not encapsulation. Take for instance the completed trace equivalent processes a(b0 + c0) and abO + acO. 
We have d^j(a(b0 + c0)) ~cr cicQ <jL CT a0 + ac0 ~cr d^j(ab0 + ac0). 

5 Parallel composition ( 1 1 ) 

We now consider the parallel composition operator (without communication). That is, p\\q behaves as 
p\\_q + q\\_p where the left-merge operator is defined by 



x\\_y-^x'\\y 

Let us restrict for a moment to only trace formulas (meaning that conjunctions are disregarded). 
The following example shows that the requirement AP and even being closed under substrings is not 
sufficient (by a substring of w we mean a subsequence constisting of elements appearing consecutively 
in w). Take G = {(a)T, {b)T, {a)(b)T, (a)(b){a)T, (b)(a)T}. This language not only satisfies AP, but is 
also closed under prefixes and substrings (but not arbitrary subsequences). However, we have aaO ~^ a0, 
but flwO||M) |= (a)(b)(a)T while aO||M) does not satisfy this formula. 

This example suggests that if a trace a belongs to G, then all subsequences of a must belong to the 
language as well. This is not unexpected; the behaviour of parallel composition consists of all possible 
interleavings of the component processes, and all of these interleavings should be described in the modal 
characterization. 

It is also necessary to close the language on subconjunctions. Indeed, take G = {(a)T A (b)T}, a 
language which does not meet this condition. We have aO ~^ bO, but a0\ \b0 \= (a)T A (b)T while Z?0| |Z?0 
does not satisfy this formula. 

In case of general HML formulas, we first define a generalization of a subsequence for an arbitrary 
formula <p G HML by specifying a set of subformulas with possible replacement from a lower level. We 
thus define Sub(<p) as the smallest set of HML formulas satisfying: 

• <p G Sub((p); 

• <p' G Sub((p) => I <P'=D[C[V}}} CSub(<p). 
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We now define a tool to infer satisfaction of modal formulas by a parallel composition p\\q from 
the formulas satisfied by the component processes p and q. This is accomplished by the function Par, 
which given A C HML and B C HML, returns the collection of formulas that are certainly satisfied by a 
parallel composition of two processes satisfying A and B respectively One can view Par(A,B) as parallel 
composition operator on collections of modal formulas. 

Formally, Par : g?(HML) x <&>{HML) — > Z?(HML) is defined with induction on the structure of 
formulas. 

• T G Par(A,B) 

def 

• (a)(p ePar(A,B) <^> (3(a)(p A G A : (p G Par((p A ,B)) V(3(a)(p B G B : (p G Par(A, <p B )) 

def 

• A/e/fli € Par(A,B) 44> V, e/ : <p ; G Par(A,B) 

def 

• ^<pGPar(A,£) <^> VC,D C Sub((p) : (p £ Par(C,D) (3y c G C : -.i/t G A) V (3y/b G D : ^y D G B) 
By abuse of notation, we let A C //ML also denote the formula ApeA <P- 

Lemma 4 Let 9 G //ML. 

[= <p^3A,5 <ZSub((p) : (p \= A Aq \= B A(p € Par(A,B)). 

Proof: We use induction on the structure of formulas. The base case (<p = T) is immediate. We proceed 
with the inductive step: 

" =^ " : Assume that p\\q \= (p. We prove that 3A,B C Sub{(p) : (p \= A Aq\= B A(f> G Par(A,B)). 

• (p= (a) y: Without loss of generality, suppose p\ \_q \= (a) y (the case 1 1 |= (a) y * s symmetric), 
so p — > p' Ap'\ \q \= y. From the inductive hypothesis we know that there are A',B' C Sub(y) such 
that p' \=A' Aq \= B' Ay € Par(A' ,B'). We take A = {a) (/\<peA> <P) and B = B'. 

• (p = f\ ieI (pf. By the inductive hypothesis, for each i G / there are A,,5, C Sub((pj) such that p \= 
Aj A q \= Bi A (pi G Par(Ai,Bj). We can take A = \J ieI Ai and B = \J ieI Bi. 

• (p = We have: 

p||?l=- , v^- , (p||0l=vO 

-.(3C,D C Sub(y) :(p\=CAq\=DAye Par(C,D))) (inductive hypothesis) 
<&VC,DClSub(y) : y G Par(C,D)(3yc G C : p ^ i|/ c )V(]i)/ fl eD: 9 ^ 
We define: 

,D<ZSub(\l/):\l/ePar{C,D) 
Pq{y) = Uc,DQSub( ¥ y. ¥ ePa r (C,D){^ D I « H= A yb G D} 

These are the A and 5 we are looking for. 
" <^": Suppose that 3A,B C Sub(<p) : (p \= A,q \= B A(p £ Par(A,B)). We prove that |= <p. 

• 9 = (a)y/': From (a)y G Par(A,B) we have (3(a) 1//^ G A : y G Par(y A ,B)) V(3{a)y B £ B : y £ 
Par(A,y B )). Without loss of generality suppose that (3(a)y A G A : y G Par(y A ,B)). Then p A 
p' : p' \= y A . From i/a G Par(y A ,B) and the inductive hypothesis we have p'| |g |= y/\ Since p| |o A 
p'\\q, we finally obtain p||o (= (a)l/A. 

• 9 = A(e/ < P/ : According to the definition of Par we have V, e / : 9, G Par(A,B). The inductive 
hypothesis yields V,- e / : p| |a |= <p,-, and hence p| \q \= f\ jel <p { . 

• (p = ^y- WehaveVC,DQSub(y) : yePar(C,D) (3y c G C : -.yc gA) V (3y D eD : ^y D eB). 
Suppose, towards a contradiction, that p\\q \= y. Then according to the inductive hypothesis there 
exist C,D such that p \= C, q \= D and y G Par(C,D). But from the earlier remark, we have either 
G C : -ity/c G A or y D G D : -il/Ab G 5. This contradicts the fact that p \= A,C and q \= B,D. 
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□ 

Theorem 4 For any language C HML satisfying 

(PAR) <p G => Sub((p) C 0=, 
~ff is a congruence with respect to parallel composition 1 1. 

Proof: Suppose p\ ~^ q\ and p2 ~^ <?2- Suppose that p\ \ \p2 \= <p G ^. According to Lem.[4l there exist 
A,B C Sub((p) such that pi |= A,/? 2 |=B and <p G Par(A,B). Since <p G by condition PAR, A,B C 
Since /?i and /?2 ~^ <?2, it follows that gi |= A and (72 |= B. According to Lem. |4] this implies 

<7ill<?2 h 9- 

□ 

As an example, if we want to define a modal language that would be a congruence with respect to 
parallel composition, which includes behaviour described by a formula (a) (-i(fe)T A (c) (d)T), we should 
include the following formulas in the characterization (we omit irrelevant formulas like (a)-iT): (a) J, 
(a)^(b)T, (a)(c)J, (a)(c)(d)T, (a)(d)J, (a)(->(fe)T A (c)T) (a)(-.(6)TA (</)T). 

All basic equivalences except for completed trace have modal characterizations that satisfy the con- 
dition PAR. We note that parallel composition is compositional with respect to completed trace equiva- 
lence. 

6 Conclusions and future work 

We have presented, for a number of process operators from the literature, general conditions that guar- 
antee congruence of process equivalences denned by means of a modal characterization. To the best of 
our knowledge it is the first such attempt. 

Our conditions are sufficient, but by no means necessary. We believe that it is difficult (if not im- 
possible) to provide a syntactic restriction on a modal language that would characterize the class of 
congruences for a given operator (strictly speaking, languages that induce congruences). We aimed at 
clear and comprehensible rather than slightly relaxed but more complicated conditions. 

As the next step, we would like to investigate other process operators (e.g. sequential composition, 
renaming, merge with communication), consider the setting of weak semantics and different modal lan- 
guages. In the last case, if we consider e.g. HML with recursion or the /I -calculus, we may attempt to 
combine our work with existing results on characteristic formulas (2). In that setting, instead of modal 
language properties, we could focus on compositionality of single formulas. 
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